Doctrine - PHP Object Persistence Libraries and More. The J2EE guy still doesn’t get PHP. Following on from Friendster’s switch to PHP it’s interesting to see the flame war that’s played out here (Jeff does a neat round up of links here ). After various comments to the effect of “well clearly Friendster don’t know Java” think this put an end to that line; We had not one but TWO guys here who had written bestselling JSP books. Not that this necessarily means they’re great Java devs, but I actually think our guys were as good as any team.
Top Ten Security Vulnerabilities in PHP Code ! — Rochak Chauhan. 1.
Unvalidated Parameters Most importantly, turn off register_globals. This configuration setting defaults to off in PHP 4.2.0 and later. Access values from URLs, forms, and cookies through the superglobal arrays $_GET, $_POST, and $_COOKIE.